Chameleon Android malware can turn off fingerprint unlock to steal your pin::Be careful out there.
1 point
Most apps choose to distribute through Play Store only though. If the devs aren’t officially distributing on a separate platform or provide signing keys for you to verify the signature of the APK you get from elsewhere, you’re just asking for malware by downloading it anywhere else.